ELSA-2016-1940

ELSA-2016-1940 - openssl security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2016-09-27

Description

[1.0.1e-48.3]
- fix CVE-2016-2177 - possible integer overflow
- fix CVE-2016-2178 - non-constant time DSA operations
- fix CVE-2016-2179 - further DoS issues in DTLS
- fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
- fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
- fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
- fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
- fix CVE-2016-6304 - unbound memory growth with OCSP status request
- fix CVE-2016-6306 - certificate message OOB reads
- mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
112 bit effective strength
- replace expired testing certificates

Related CVEs

CVE-2016-2181

CVE-2016-2177

CVE-2016-6304

CVE-2016-2178

CVE-2016-6306

CVE-2016-6302

CVE-2016-2179

CVE-2016-2180

CVE-2016-2182

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	openssl-1.0.1e-48.el6_8.3.src.rpm	28da37e69d9c5c0fc78d3b8094c384cdf171c9600f95e24f2bf95f3c0cdbb4e2	ELSA-2023-12326	ol6_i386_latest_archive
	openssl-1.0.1e-48.el6_8.3.src.rpm	28da37e69d9c5c0fc78d3b8094c384cdf171c9600f95e24f2bf95f3c0cdbb4e2	ELSA-2023-12326	ol6_u8_i386_patch
	openssl-1.0.1e-48.el6_8.3.i686.rpm	8539c4caf9a1896dbf554d8d8dbd13870aacb6c836d6a9cfbe45d1f9d4317e02	ELSA-2023-12326	ol6_i386_latest_archive
	openssl-1.0.1e-48.el6_8.3.i686.rpm	8539c4caf9a1896dbf554d8d8dbd13870aacb6c836d6a9cfbe45d1f9d4317e02	ELSA-2023-12326	ol6_u8_i386_patch
	openssl-devel-1.0.1e-48.el6_8.3.i686.rpm	80b099a9ca897326df3c24465258adf9d2c20df8588ab6dbe7fde826bed1a398	ELSA-2023-12326	ol6_i386_latest_archive
	openssl-devel-1.0.1e-48.el6_8.3.i686.rpm	80b099a9ca897326df3c24465258adf9d2c20df8588ab6dbe7fde826bed1a398	ELSA-2023-12326	ol6_u8_i386_patch
	openssl-perl-1.0.1e-48.el6_8.3.i686.rpm	acf3554b3e7871f726180e50858ea1e6a12832c2588933cfa79556f44e7c9a55	ELSA-2023-12326	ol6_i386_latest_archive
	openssl-perl-1.0.1e-48.el6_8.3.i686.rpm	acf3554b3e7871f726180e50858ea1e6a12832c2588933cfa79556f44e7c9a55	ELSA-2023-12326	ol6_u8_i386_patch
	openssl-static-1.0.1e-48.el6_8.3.i686.rpm	d61a1dbb66dee966a1e0783f19552133107e942ca0b6dce96e6c693c2388eb1e	ELSA-2023-12326	ol6_i386_latest_archive
	openssl-static-1.0.1e-48.el6_8.3.i686.rpm	d61a1dbb66dee966a1e0783f19552133107e942ca0b6dce96e6c693c2388eb1e	ELSA-2023-12326	ol6_u8_i386_patch
Oracle Linux 6 (x86_64)	openssl-1.0.1e-48.el6_8.3.src.rpm	28da37e69d9c5c0fc78d3b8094c384cdf171c9600f95e24f2bf95f3c0cdbb4e2	ELSA-2023-12326	ol6_u8_x86_64_patch
	openssl-1.0.1e-48.el6_8.3.src.rpm	28da37e69d9c5c0fc78d3b8094c384cdf171c9600f95e24f2bf95f3c0cdbb4e2	ELSA-2023-12326	ol6_x86_64_latest_archive
	openssl-1.0.1e-48.el6_8.3.i686.rpm	8539c4caf9a1896dbf554d8d8dbd13870aacb6c836d6a9cfbe45d1f9d4317e02	ELSA-2023-12326	ol6_u8_x86_64_patch
	openssl-1.0.1e-48.el6_8.3.i686.rpm	8539c4caf9a1896dbf554d8d8dbd13870aacb6c836d6a9cfbe45d1f9d4317e02	ELSA-2023-12326	ol6_x86_64_latest_archive
	openssl-1.0.1e-48.el6_8.3.x86_64.rpm	d21013c474b19dc823fb3d24272d5e7e017fc2bc6cde5c26e1ff07aaf561b306	ELSA-2023-12326	exadata_dbserver_12.1.2.3.3_x86_64_base
	openssl-1.0.1e-48.el6_8.3.x86_64.rpm	d21013c474b19dc823fb3d24272d5e7e017fc2bc6cde5c26e1ff07aaf561b306	ELSA-2023-12326	exadata_dbserver_12.1.2.3.4_x86_64_base
	openssl-1.0.1e-48.el6_8.3.x86_64.rpm	d21013c474b19dc823fb3d24272d5e7e017fc2bc6cde5c26e1ff07aaf561b306	ELSA-2023-12326	exadata_dbserver_12.2.1.1.0_x86_64_base
	openssl-1.0.1e-48.el6_8.3.x86_64.rpm	d21013c474b19dc823fb3d24272d5e7e017fc2bc6cde5c26e1ff07aaf561b306	ELSA-2023-12326	ol6_u8_x86_64_patch
	openssl-1.0.1e-48.el6_8.3.x86_64.rpm	d21013c474b19dc823fb3d24272d5e7e017fc2bc6cde5c26e1ff07aaf561b306	ELSA-2023-12326	ol6_x86_64_latest_archive
	openssl-devel-1.0.1e-48.el6_8.3.i686.rpm	80b099a9ca897326df3c24465258adf9d2c20df8588ab6dbe7fde826bed1a398	ELSA-2023-12326	ol6_u8_x86_64_patch
	openssl-devel-1.0.1e-48.el6_8.3.i686.rpm	80b099a9ca897326df3c24465258adf9d2c20df8588ab6dbe7fde826bed1a398	ELSA-2023-12326	ol6_x86_64_latest_archive
	openssl-devel-1.0.1e-48.el6_8.3.x86_64.rpm	feae044cbfcb9c6a26d1e6c5d7b215e4a61191957c717b15595e6a6fc7e809db	ELSA-2023-12326	ol6_u8_x86_64_patch
	openssl-devel-1.0.1e-48.el6_8.3.x86_64.rpm	feae044cbfcb9c6a26d1e6c5d7b215e4a61191957c717b15595e6a6fc7e809db	ELSA-2023-12326	ol6_x86_64_latest_archive
	openssl-perl-1.0.1e-48.el6_8.3.x86_64.rpm	9e66f1a44c2db5144b81b6a2719cc4f140e995add38ec2041c32dba7c693e187	ELSA-2023-12326	ol6_u8_x86_64_patch
	openssl-perl-1.0.1e-48.el6_8.3.x86_64.rpm	9e66f1a44c2db5144b81b6a2719cc4f140e995add38ec2041c32dba7c693e187	ELSA-2023-12326	ol6_x86_64_latest_archive
	openssl-static-1.0.1e-48.el6_8.3.x86_64.rpm	3739da4ee4e1d9591a515abbd16d705566221d136d10b419df91de8ec3916040	ELSA-2023-12326	ol6_u8_x86_64_patch
	openssl-static-1.0.1e-48.el6_8.3.x86_64.rpm	3739da4ee4e1d9591a515abbd16d705566221d136d10b419df91de8ec3916040	ELSA-2023-12326	ol6_x86_64_latest_archive
Oracle Linux 7 (x86_64)	openssl-1.0.1e-51.el7_2.7.src.rpm	5ebbd175a7dea9ba4ef29344c630a269fe2de07ddd439119cc139944cdf6c714	ELSA-2017-3518	ol7_x86_64_latest_archive
	openssl-1.0.1e-51.el7_2.7.src.rpm	5ebbd175a7dea9ba4ef29344c630a269fe2de07ddd439119cc139944cdf6c714	ELSA-2017-3518	ol7_x86_64_optional_archive
	openssl-1.0.1e-51.el7_2.7.src.rpm	5ebbd175a7dea9ba4ef29344c630a269fe2de07ddd439119cc139944cdf6c714	ELSA-2017-3518	ol7_x86_64_u2_patch
	openssl-1.0.1e-51.el7_2.7.x86_64.rpm	6d4322370987c3c94ef358f558c1db0c023cbdce8b4696e0b131ba77e34e2b53	ELSA-2017-3518	ol7_x86_64_latest_archive
	openssl-1.0.1e-51.el7_2.7.x86_64.rpm	6d4322370987c3c94ef358f558c1db0c023cbdce8b4696e0b131ba77e34e2b53	ELSA-2017-3518	ol7_x86_64_u2_patch
	openssl-devel-1.0.1e-51.el7_2.7.i686.rpm	51d60329250d31f24276cc810406905a39baeab3ac7ae556aa8a36f653907268	ELSA-2017-3518	ol7_x86_64_latest_archive
	openssl-devel-1.0.1e-51.el7_2.7.i686.rpm	51d60329250d31f24276cc810406905a39baeab3ac7ae556aa8a36f653907268	ELSA-2017-3518	ol7_x86_64_u2_patch
	openssl-devel-1.0.1e-51.el7_2.7.x86_64.rpm	696f04b21d1b2ce8b08ca115103a0fc8995502e6fb7e39870a9f00b74561b41b	ELSA-2017-3518	ol7_x86_64_latest_archive
	openssl-devel-1.0.1e-51.el7_2.7.x86_64.rpm	696f04b21d1b2ce8b08ca115103a0fc8995502e6fb7e39870a9f00b74561b41b	ELSA-2017-3518	ol7_x86_64_u2_patch
	openssl-libs-1.0.1e-51.el7_2.7.i686.rpm	b85b37c85d902ced18ab256ac769753d1b6fbb7eb33265343f3a006c9683e85b	ELSA-2017-3518	ol7_x86_64_latest_archive
	openssl-libs-1.0.1e-51.el7_2.7.i686.rpm	b85b37c85d902ced18ab256ac769753d1b6fbb7eb33265343f3a006c9683e85b	ELSA-2017-3518	ol7_x86_64_u2_patch
	openssl-libs-1.0.1e-51.el7_2.7.x86_64.rpm	dadf454dc99cbe2410092b18a672e677c0f7b9fec91f4837888dbb44c7ac558a	ELSA-2017-3518	ol7_x86_64_latest_archive
	openssl-libs-1.0.1e-51.el7_2.7.x86_64.rpm	dadf454dc99cbe2410092b18a672e677c0f7b9fec91f4837888dbb44c7ac558a	ELSA-2017-3518	ol7_x86_64_u2_patch
	openssl-perl-1.0.1e-51.el7_2.7.x86_64.rpm	4016628f921b982d0c8980b6598093f259ea708470409d65a8f6082aa7aa8185	ELSA-2017-3518	ol7_x86_64_optional_archive
	openssl-static-1.0.1e-51.el7_2.7.i686.rpm	ce66f9f6e65a33db79243e7b7563c558914e78b3f215271ce10b9d243c66b76c	ELSA-2017-3518	ol7_x86_64_optional_archive
	openssl-static-1.0.1e-51.el7_2.7.x86_64.rpm	d640fea071f7036b159aa98ec13eaed035f2ed163b4af4c1466af2188f052431	ELSA-2017-3518	ol7_x86_64_optional_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team